Test ID:	1.3.6.1.4.1.25623.1.0.804215
Category:	Web application abuses
Title:	TYPO3 < 4.3.4, 4.4.0 Multiple Vulnerabilities (TYPO3-SA-2010-012)
Summary:	TYPO3 is prone to multiple vulnerabilities.
Description:	Summary: TYPO3 is prone to multiple vulnerabilities. Vulnerability Insight: The following flaws exist: - CVE-2010-3670: Insecure randomness during generation of a hash with the 'forgot password' function - CVE-2010-3672: Cross-site scripting (XSS) in the textarea view helper in an extbase extension Vulnerability Impact: Successful exploitation will allow remote attackers to get sensitive information or execute arbitrary scripts. Affected Software/OS: TYPO3 versions prior to 4.3.4 and 4.4.0 only. Solution: Update to version 4.3.4, 4.4.1 or later. CVSS Score: 5.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3670 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=590719 https://security-tracker.debian.org/tracker/CVE-2010-3670 Common Vulnerability Exposure (CVE) ID: CVE-2010-3672 https://security-tracker.debian.org/tracker/CVE-2010-3672
Copyright	Copyright (C) 2014 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.